GitLab - TechUpdate24

GitLab CVE-2026-85706 Added to CISA KEV: Patch Self-Managed Servers Now

September 18, 2026September 12, 2026 by Kiran Sonawane

GitLab CVE-2026-85706 critical CVSS 10 file-read vulnerability

GitLab CVE-2026-85706 is a CVSS 10.0 unauthenticated path traversal flaw affecting self-managed GitLab. GitLab says it has been added to CISA’s Known Exploited Vulnerabilities catalog and has published detection guidance.

GitLab CVE-2026-19478: Critical GraphQL Flaw Can Modify or Delete Public Data

September 18, 2026August 19, 2026 by Kiran Sonawane

GitLab CVE-2026-19478 is a critical GraphQL code-injection vulnerability affecting self-managed GitLab CE/EE. Under certain conditions, unauthenticated attackers could modify or delete public projects and user data.